FeMiner vulnerabilities
We track 3 vulnerabilities in FeMiner products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 12, 2026.
Latest FeMiner vulnerabilities
- 7.3 High severity
wms: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in FeMiner wms up to 1.0. This impacts an unknown function of the file /wms-master/src/basic/depart/depart_add_bg.php of the component Basic Organizational Structure Module. Performing a manipulation of the argument Name results in
- 9.8 Critical severity
wms: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in FeMiner wms up to 9cad1f1b179a98b9547fd003c23b07c7594775fa. Affected by this vulnerability is an unknown functionality of the file /src/chkuser.php. The manipulation of the argument Username leads to sql injection.
- 9.8 Critical severity
wms: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestricted upload. The att